soufiane.co

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:9b:86:d8:3b:70:0f:17:02:52:bb:a6:ee:9a:a6:35:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=soufiane.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7b:9b:86:d8:3b:70:0f:17:02:52:bb:a6:ee:9a:a6:35:93
Serial Number (int): 303398319419391493113816064896541953242515
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:a4:e3:3a:46:07:a7:e7:39:7b:6e:91:11:12:9a:a1:b8:80:35:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:7c:3d:5f:2e:9b:56:a7:0d:e2:82:c2:8b:ee:4b:54:4c:e4:49:3c
Fingerprint (sha256): d6:5f:9a:4f:8c:0d:f4:e2:48:72:df:57:f9:57:f2:9b:08:ec:d0:a5:90:2b:b4:ab:d4:f4:bb:fa:23:57:d3:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate soufiane.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soufiane.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soufiane.co
www.soufiane.co

Other certificates including the domain name soufiane.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for soufiane.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303398319419391493113816064896541953242515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 17:18:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 17:18:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soufiane.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689923984296312874680114087030248480208751343814028264115542010261393115854736099788535951282169789376910685334055605425557290934025209491669514277390909191540246629798485568069552154837754136722573400251300675796024702309502937562123232681588398881500502493748437902223237479121739770584157242005986667282846871663925468592097025024314824242877192810602104923316227662567038145380658520918693904992709802182856131921119360406924442031660350643778256424199410742621520377129950803052045889906245638979421135534156659258494269999748137135800309525084859570855923093665571049842098219302387234680864402859068741145430375069019613129356956225287157761980243360193449127296277911174891454585510240503324849395745120737196513119726269142472100540707184211449791987546161543273373546611978289322659916161592303112738091167425235317690521030665322523239455001897618165905432557692386127157738558293092039910496726265474227868168584973250998948523569161839413479900366780249131574117339862197598743649491434274696441583941534943674963038192086906951346659016176557097476637445178509370420836761465454842343862032430600625284136039049067748980554083799577876200083296475429775511515856239036898396168450015806173418080213787765952744649087347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3a4e33a4607a7e7397b6e9111129aa1b880352c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soufiane.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soufiane.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e1a2316150000040300473045022100961a73db98aeea4b6e02b62479c95d2601b0c59211fd1548fbb0a16eb2bdf4d2022010604b696db50a36bc926058381f4b214c598668ec41053f0f3ffd2e641a27fc007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e1a23184a00000403004730450220265a79c1f278e5ba3c04d6ab912600571169a76c1f29f8fdb7a1e0f62f9dc825022100943fb11af106a1492fcad1ab9f8a0d243e28f571dd8ddef9039f3be1b51d759c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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